{"name":"Security Header Generator","slug":"security-header-generator","version":"5.1.31","author":"Kevin C. Pirnie","author_profile":"https://profiles.wordpress.org/kevp75/","requires":"5.6.10","tested":"6.7","requires_php":"7.4","requires_plugins":[],"rating":100,"ratings":{"1":0,"2":0,"3":0,"4":0,"5":5},"num_ratings":5,"support_threads":4,"support_threads_resolved":4,"downloaded":15953,"last_updated":"2024-08-06 12:25pm GMT","added":"2021-02-16","homepage":"https://kevinpirnie.com/blog/2021/10/13/wordpress-plugin-security-header-generator/","sections":{"description":"

This plugin generates the proper security HTTP response headers, attempts to generate a valid Content Security Policy, and sets browser permissions if configured.

\n","installation":"

Download the plugin, unzip it, and upload to your sites /wp-content/plugins/ directory\n
1. You can also upload it directly to your Plugins admin
\n
Activate the plugin through the ‘Plugins’ menu in WordPress

\n","faq":"\n

\nWhat is a Content Security Policy?\n\n

A Content Security Policy is an added layer of security that helps to detect and mitigate certain types of attacks, including Cross Site Scripting (XSS) and data injection attacks.

\n\n","changelog":"

5.1.31

Fix: Issue where menu would disappear on non-multisite

5.1.29

Fix: Some undefined array keys when some settings not set
Verify: WP Core 6.7 Compatibility
Fix: Defaults for settings.\n
- Found headers were being applied after turning off setting that should not have been
\n
Clean Up: Versions older than 4

5.0.11

Add: sandbox directive for Content Security Policy\n
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/sandbox
\n
Fix: Application of CSP headers when there is no value set\n
- No longer sets the directive if nothing is configured for it.
\n
Fix: Some styling in the admin pages
Remove: Deprecated CLI methods
Update: JS Libraries for settings framework
Verified: PHP 8.3 Compatibility

4.6.01

Verified: WP Core 6.6 Compatibility
Updated: settings fw: Fixed: PHP 8.x deprecated notices.
Updated: Documentation
Removed: references to implementation to avoid confusion

4.1.22

Removed: CLI Generator
Verified: WP Core 6.5 Compatibility
Add: Apply CSP to REST API\n
- Please be aware, once this is switched on it will also be active for the admin area of the site.
- Hook: wpsh_send_restapi_headers
\n

4.0.01

Verified: Core Version 6.4 compliant
Remove: navigate-to directive for Content Security Policy\n
- Per: https://docs.w3cub.com/http/headers/content-security-policy/navigate-to no longer supported in any browser
\n
Add: report-to directive for Content Security Policy\n
- https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/report-to
- Please be aware, this directive currently does nothing in Firefox and Safari
\n
Updated: WordPress Defaults. Compliant ONLY with the following:\n
- Plugins: Gravity Forms
- Themes: Twenty Twenty, Twenty Twenty-One, Twenty Twenty-Two, Twenty Twenty-Three
\n
Updated: WordPress Core version requirements to 5.6.10

\n","screenshots":"

$\"Standard$
Standard Header Settings
$\"Content$
Content Security Policy Settings
$\"Permissions$
Permissions Settings
$\"Documentation\"$
Documentation
$\"Import/Export$
Import/Export Settings
$\"Headers$
Headers Set
$\"\"$

"},"download_link":"https://downloads.wordpress.org/plugin/security-header-generator.5.1.31.zip","screenshots":{"1":{"src":"https://ps.w.org/security-header-generator/assets/screenshot-1.png?rev=3128304","caption":"Standard Header Settings"},"2":{"src":"https://ps.w.org/security-header-generator/assets/screenshot-2.png?rev=3128304","caption":"Content Security Policy Settings"},"3":{"src":"https://ps.w.org/security-header-generator/assets/screenshot-3.png?rev=3128304","caption":"Permissions Settings"},"4":{"src":"https://ps.w.org/security-header-generator/assets/screenshot-4.png?rev=3128304","caption":"Documentation"},"5":{"src":"https://ps.w.org/security-header-generator/assets/screenshot-5.png?rev=3128304","caption":"Import/Export Settings"},"6":{"src":"https://ps.w.org/security-header-generator/assets/screenshot-6.png?rev=3128304","caption":"Headers Set"},"7":{"src":"https://ps.w.org/security-header-generator/assets/screenshot-7.png?rev=3128304","caption":""}},"tags":{"content-security-policy":"content security policy","permissions":"permissions","permissions-policy":"permissions policy","security":"security","security-headers":"Security Headers"},"versions":{"4.0.01":"https://downloads.wordpress.org/plugin/security-header-generator.4.0.01.zip","4.1.22":"https://downloads.wordpress.org/plugin/security-header-generator.4.1.22.zip","4.1.23":"https://downloads.wordpress.org/plugin/security-header-generator.4.1.23.zip","4.6.01":"https://downloads.wordpress.org/plugin/security-header-generator.4.6.01.zip","5.1.29":"https://downloads.wordpress.org/plugin/security-header-generator.5.1.29.zip","5.1.31":"https://downloads.wordpress.org/plugin/security-header-generator.5.1.31.zip","trunk":"https://downloads.wordpress.org/plugin/security-header-generator.zip"},"donate_link":"https://paypal.me/kevinpirnie","icons":{"1x":"https://ps.w.org/security-header-generator/assets/icon-128x128.png?rev=3128304","2x":"https://ps.w.org/security-header-generator/assets/icon-256x256.png?rev=3128304"},"contributors":{"kevp75":"https://profiles.wordpress.org/kevp75/"}}

Security Header Generator

Screenshots

Categories

Get New Themes & Resources